CVE Feed

    Dashboard / CVE / CVE-2007-3103

    CVE-2007-3103

    The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

    Published:Jul 11, 2007
    Last Modified:Apr 23, 2026
    EPS:Jul 15, 2007
    EPSS Score:0.00081
    CVSS Score:6.2

    Affected Products

    Vendor
    Fedoraproject
    Product
    Fedora Core
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Linux

    Exploits

    https://www.exploit-db.com/exploits/5167

    Related CVEs

    CVE-2007-6283 (CVSS 4.9) — Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, whi…
    CVE-2007-3847 (CVSS 5) — The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, a…
    CVE-2007-1321 (CVSS 7.2) — Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, all…
    CVE-2007-1320 (CVSS 7.2) — Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in Q…
    CVE-2006-5170 (CVSS 7.5) — pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distribution…
    CVE-2008-2944 (CVSS 4.9) — Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Li…
    CVE-2005-2970 (CVSS 5) — Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to ca…

    References

    http://bugs.gentoo.org/show_bug.cgi?id=185660
    http://bugzilla.redhat.com/242903
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557
    http://osvdb.org/40945
    http://secunia.com/advisories/26056
    http://secunia.com/advisories/26081
    http://secunia.com/advisories/26282
    http://secunia.com/advisories/27240
    http://secunia.com/advisories/35674
    http://security.gentoo.org/glsa/glsa-200710-11.xml
    http://www.debian.org/security/2007/dsa-1342
    http://www.redhat.com/support/errata/RHSA-2007-0519.html
    http://www.redhat.com/support/errata/RHSA-2007-0520.html
    http://www.securityfocus.com/archive/1/473869/100/0/threaded
    http://www.securityfocus.com/bid/24888
    http://www.securitytracker.com/id?1018375
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35375
    https://issues.rpath.com/browse/RPL-1485
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802
    https://www.exploit-db.com/exploits/5167
    https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html
    https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html
    http://bugs.gentoo.org/show_bug.cgi?id=185660
    http://bugzilla.redhat.com/242903
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557
    http://osvdb.org/40945
    http://secunia.com/advisories/26056
    http://secunia.com/advisories/26081
    http://secunia.com/advisories/26282
    http://secunia.com/advisories/27240
    http://secunia.com/advisories/35674
    http://security.gentoo.org/glsa/glsa-200710-11.xml
    http://www.debian.org/security/2007/dsa-1342
    http://www.redhat.com/support/errata/RHSA-2007-0519.html
    http://www.redhat.com/support/errata/RHSA-2007-0520.html
    http://www.securityfocus.com/archive/1/473869/100/0/threaded
    http://www.securityfocus.com/bid/24888
    http://www.securitytracker.com/id?1018375
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35375
    https://issues.rpath.com/browse/RPL-1485
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10802
    https://www.exploit-db.com/exploits/5167
    https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00095.html
    https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00096.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High